Create consumer grants

task brazil Updated Sep 18, 2026 1 min read usg-create-consumer-grants.md

Raw file servicenow.com

Create consumer grants to specify which identity groups can access which alias groups.

Before you begin

Role required: admin or cryptographic_manager

An alias group must already be created. See Create an alias group.

Procedure

Navigate to All, type sys_secret_alias_consumer.list into the search box and select Enter.

Note: Two consumer grants are included in the base system: Default MID alias consumer and Outbound Security Alias Consumer.
Select New.

Complete the fields as shown in the following table.

Field	Description
Alias Group	Select the alias group this consumer grant will apply to. This grant provides access only to secrets in the selected alias group.
Consumer Type	Select identity_group to grant access to a group of members or sys_service to grant access to a specific service.
Consumer Location	Select external for external callers (such as MID Servers) or glide for platform-internal access.

Select Submit.

What to do next

If you created a custom identity group and have not yet added members to it, add members to complete your configuration. See Add members to an identity group.

Parent Topic:Configuring Unified Secrets Gateway

Keywords consumer grantsaccess control configurationunified secrets gateway

49 lines · 2.1 KB Wrap lines

---
title: Create consumer grants
description: Create consumer grants to specify which identity groups can access which alias groups.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/usg-create-consumer-grants.html
release: brazil
topic_type: task
last_updated: "2026-09-18"
reading_time_minutes: 1
keywords: [consumer grants, access control configuration, unified secrets gateway]
breadcrumb: [Configuring Unified Secrets Gateway, Unified Secrets Gateway, Encryption]
---

# Create consumer grants

Create consumer grants to specify which identity groups can access which alias groups.

## Before you begin

Role required: admin or cryptographic\_manager

An alias group must already be created. See [Create an alias group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/usg-create-alias-group.md).

## Procedure

1.  Navigate to **All**, type `sys_secret_alias_consumer.list` into the search box and select Enter.

    **Note:** Two consumer grants are included in the base system: Default MID alias consumer and Outbound Security Alias Consumer.

2.  Select **New**.

3.  Complete the fields as shown in the following table.

    |Field|Description|
    |-----|-----------|
    |Alias Group|Select the alias group this consumer grant will apply to. This grant provides access only to secrets in the selected alias group.|
    |Consumer Type|Select identity\_group to grant access to a group of members or sys\_service to grant access to a specific service.|
    |Consumer Location|Select external for external callers \(such as MID Servers\) or glide for platform-internal access.|

4.  Select **Submit**.


## What to do next

If you created a custom identity group and have not yet added members to it, add members to complete your configuration. See [Add members to an identity group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/usg-add-members-identity-group.md).

**Parent Topic:**[Configuring Unified Secrets Gateway](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/usg-configuring.md)